Lidarr

ReviewAudited by ClawScan on May 1, 2026.

Overview

This appears to be a straightforward Lidarr helper, but it needs a Lidarr API key and can change your music library, including optional file deletion.

Install this only if you run Lidarr and want an agent to manage it. Protect the API key file, verify the configured Lidarr URL, and ask for confirmation before actions that add, search, monitor, remove, or delete files.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Anyone using this skill is granting it the ability to act through their Lidarr API key.

Why it was flagged

The script reads a local Lidarr API key and uses it to authenticate API requests. This is expected for a Lidarr integration, but it gives the skill authority over the configured Lidarr instance.

Skill content
CONFIG_FILE="$HOME/.clawdbot/credentials/lidarr/config.json" ... LIDARR_API_KEY=$(jq -r '.apiKey' "$CONFIG_FILE") ... AUTH="X-Api-Key: $LIDARR_API_KEY"
Recommendation

Use a Lidarr API key only for the intended instance, keep the config file private, and rotate the key if it is exposed.

What this means

An unintended remove command with --delete-files could delete music files managed by Lidarr.

Why it was flagged

The skill documents a destructive operation that can remove an artist and delete files. It is disclosed and user-directed, but it is a high-impact action if invoked accidentally.

Skill content
bash scripts/lidarr.sh remove <artistId> --delete-files  # delete files too
Recommendation

Require an explicit user request before remove or delete-files actions, and avoid using --delete-files unless you intend to delete the underlying media.

What this means

Adding an artist or monitoring an album may immediately start Lidarr search/download workflows.

Why it was flagged

Adding or monitoring content defaults to starting a Lidarr search unless --no-search is supplied. This is aligned with the skill's purpose, but it can trigger downstream downloads or queue activity in Lidarr.

Skill content
searchFlag="true" ... addOptions: { searchForMissingAlbums: $search }
Recommendation

Use --no-search when you only want to add or monitor items without starting searches immediately.